Accepted brotli 0.5.2+dfsg-2+deb9u1 (source) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 01 Dec 2020 17:10:22 -0500
Source: brotli
Binary: python-brotli python3-brotli brotli
Architecture: source
Version: 0.5.2+dfsg-2+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Tomasz Buchert <tomasz@debian.org>
Changed-By: Roberto C. Sánchez <roberto@debian.org>
Description:
brotli - lossless compression algorithm and format (command line utility)
python-brotli - lossless compression algorithm and format (Python 2 version)
python3-brotli - lossless compression algorithm and format (Python 3 version)
Changes:
brotli (0.5.2+dfsg-2+deb9u1) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* Fix CVE-2020-8927: a buffer overflow allows an attacker controlling the
input length of a "one-shot" decompression request to a script can trigger
a crash, which happens when copying over chunks of data larger than 2 GiB
Checksums-Sha1:
d1b6a9f0920b0b8e0563a7e239d7b2275e2e25dc 2093 brotli_0.5.2+dfsg-2+deb9u1.dsc
094faf11ffb81839870a44fc8cdb5807cb28b0b1 7774968 brotli_0.5.2+dfsg.orig.tar.gz
b151c814595310ded29d33129182b4f9946de86e 3924 brotli_0.5.2+dfsg-2+deb9u1.debian.tar.xz
d18a76563123441f3e561ca30b4af7d4f0198f3b 8625 brotli_0.5.2+dfsg-2+deb9u1_amd64.buildinfo
Checksums-Sha256:
f97e19d5d4ca8c0e559c463e8c43cee4b30a093153cbd159cdc43e11ab4e2c14 2093 brotli_0.5.2+dfsg-2+deb9u1.dsc
8aff2e5758b48fc70fcbaadeeafa745cc957b6f17c608f68155a9bf1947983fc 7774968 brotli_0.5.2+dfsg.orig.tar.gz
eb28b215282964a4ab8edf829aea97cffe4317c537b2f5c4ca529c11fc4e3724 3924 brotli_0.5.2+dfsg-2+deb9u1.debian.tar.xz
1276b9e0e29791180e178610d00a6d3d3eb347b2bba5772a03cdd74c5f24a162 8625 brotli_0.5.2+dfsg-2+deb9u1_amd64.buildinfo
Files:
8f1c7a2911784442109c21baf9acb075 2093 python optional brotli_0.5.2+dfsg-2+deb9u1.dsc
2ae95dfc2118c9f8099d3ae082ad79f2 7774968 python optional brotli_0.5.2+dfsg.orig.tar.gz
4dc1539c9a8d50c90783147392c02660 3924 python optional brotli_0.5.2+dfsg-2+deb9u1.debian.tar.xz
2f2df0d5f1433fbfa62dfe9659e0926b 8625 python optional brotli_0.5.2+dfsg-2+deb9u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=v7NZ
-----END PGP SIGNATURE-----
Reply to: